Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The SOC Incident Responder is responsible for identifying, investigating, containing, and responding to cybersecurity incidents affecting the organization's systems, networks, cloud environments, and users. This role serves as a key member of the Security Operations Center, performing rapid incident triage, threat analysis, containment actions, and escalation of significant security events. The successful candidate will combine technical cybersecurity expertise with strong analytical, communication, and documentation skills to minimize risk and ensure timely response to cybersecurity threats.

Responsibilities

Monitor and investigate security alerts from Taegis, Defender as well as user or third-party reported incidents.
Perform initial triage and analysis of suspicious events and potential security incidents.
Determine incident severity, scope, and business impact.
Contain security incidents through actions such as account disablement, password resets, session revocation, device isolation, and IP/domain blocking.
Escalate complex or high-severity incidents to senior security personnel.
Analyze endpoint, network, identity, and cloud telemetry.
Correlate indicators of compromise (IOCs) with threat intelligence sources.
Conduct malware investigations and support forensic analysis activities.
Track attacker tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
Maintain detailed incident records and case documentation.
Create incident reports detailing findings, actions taken, and business impact.
Ensure evidence is collected, preserved, and documented appropriately.
Participate in post-incident reviews and lessons-learned sessions.
Coordinate with IT Operations, Service Desk, Infrastructure, Network, and Cloud teams during investigations.
Support major incident response activities and virtual war room operations during significant security events.
Contribute to development of SOC playbooks and response procedures.
Recommend improvements to detection rules, monitoring coverage, and response workflows.
Assist in threat hunting and security control validation activities.
Stay current with emerging threats, vulnerabilities, and industry best practices.

Requirements

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or equivalent experience.
2–5+ years of cybersecurity, SOC, incident response, or security operations experience.
Familiarity with Windows, Linux, cloud platforms, and enterprise networking.
Familiarity with SIEM technologies.
Familiarity with EDR/XDR platforms (Microsoft Defender, CrowdStrike, SentinelOne, Taegis, etc.).
Familiarity with email security technologies.
Familiarity with identity platforms such as Active Directory and Entra ID.
Familiarity with network protocols and traffic analysis.
Baseline Clearance, NV-1 Eligible or Existing NV-1 Preferred.
Participation in a 24x7 SOC shift rotation and on-call coverage as required.
Support for major cybersecurity incidents outside normal business hours.
Ability to manage multiple concurrent security investigations.

Skills

Cybersecurity
Incident Response
Security Operations
SIEM technologies
EDR/XDR platforms
Microsoft Defender
CrowdStrike
SentinelOne
Taegis
Email security technologies
Active Directory
Entra ID
Network protocols
Traffic analysis
MITRE ATT&CK framework
Threat intelligence
Malware analysis
Forensic analysis
Documentation
Analytical skills
Communication skills

Location

24x7 SOC shift rotation

Work Type

24x7 SOC shift rotation
On-call coverage
Outside normal business hours

Experience Level

2-5+ years

Education Level

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or equivalent experience.
GCIH (GIAC Certified Incident Handler)
GCIA
GCFA
CISSP
Security+
CySA+
SC-200 (Microsoft Security Operations Analyst)

Salary/Compensations

Industry leading salaries reviewed annually.

Benefits

Flexible work arrangements (start/finish times, WFH, Flex time)
Salary packaging and novated leases
Paid professional membership fees
Life/Health insurance discounts
Employee stock purchase plans
Personal career development plans
Growth and promotion opportunities

About the Company

At KBR, our people are at the heart of everything we do.
Our success is built on a culture of caring, collaboration, trust and continuous learning, where every team member feels safe, supported, valued and empowered to thrive.
We are committed to creating an inclusive environment where people can belong, connect and grow, while doing meaningful work that makes a lasting impact on communities across Australia.
Through genuine collaboration and strong partnerships with our clients, we deliver innovative and sustainable solutions for a better tomorrow.
When you join KBR, you'll become part of a team that shares common values, works together towards a common purpose, and genuinely cares about the success and wellbeing of its people.